Skip to content

build(deps): bump the go-mod group across 1 directory with 9 updates#634

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/go-mod-75c6472fc9
Open

build(deps): bump the go-mod group across 1 directory with 9 updates#634
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/go-mod-75c6472fc9

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 2, 2026

Bumps the go-mod group with 7 updates in the / directory:

Package From To
github.com/authzed/authzed-go 1.7.0 1.8.0
github.com/authzed/spicedb 1.49.1-0.20260205205028-286d6e84c0dd 1.49.2
github.com/mark3labs/mcp-go 0.43.2 0.44.1
github.com/samber/lo 1.52.0 1.53.0
golang.org/x/mod 0.32.0 0.33.0
golang.org/x/net 0.49.0 0.51.0
google.golang.org/grpc 1.78.0 1.79.1

Updates github.com/authzed/authzed-go from 1.7.0 to 1.8.0

Release notes

Sourced from github.com/authzed/authzed-go's releases.

v1.8.0

What's Changed

New Contributors

Full Changelog: authzed/authzed-go@v1.7.0...v1.8.0

Commits
  • d8c9a1a Merge pull request #394 from authzed/dependabot/go_modules/magefiles/go-mod-m...
  • ed6f0b8 chore(deps): bump the go-mod-magefiles group across 1 directory with 3 updates
  • bdf5808 Merge pull request #393 from authzed/dependabot/go_modules/go-mod-d64280bf30
  • 8adc898 chore(deps): bump the go-mod group with 3 updates
  • 43eca72 Merge pull request #375 from ivanauth/fix/issue-142-add-api-examples
  • 2ea2f5c Merge pull request #388 from ivanauth/fix/issue-137-contributing-local-protos
  • 41234c1 Merge pull request #389 from authzed/dependabot/go_modules/go-mod-bb2d16fde3
  • 70ff9af Merge pull request #390 from authzed/dependabot/github_actions/github-actions...
  • ea4533e Merge pull request #391 from authzed/dependabot/go_modules/magefiles/go-mod-m...
  • dcb53b3 chore(deps): bump the go-mod-magefiles group
  • Additional commits viewable in compare view

Updates github.com/authzed/spicedb from 1.49.1-0.20260205205028-286d6e84c0dd to 1.49.2

Release notes

Sourced from github.com/authzed/spicedb's releases.

v1.49.2

Added

Changed

  • Begin deprecation of library "github.com/dlmiddlecote/sqlstats" (authzed/spicedb#2904). NOTE: in a future release, MySQL metrics will change.
  • Add support for imports and partials to the schemadsl package that drives the LSP and development server (authzed/spicedb#2919).
  • DatastoreTester.New now takes a testing.TB as its first argument, allowing per-test cleanup in datastore test suites (authzed/spicedb#2925).
  • Added support for CRDB 26.1 by fixing how version information is read from the cluster

Fixed

What's Changed

... (truncated)

Commits

Updates github.com/mark3labs/mcp-go from 0.43.2 to 0.44.1

Release notes

Sourced from github.com/mark3labs/mcp-go's releases.

Release v0.44.1

No release notes provided.

Release v0.44.0

What's Changed

New Contributors

... (truncated)

Commits
  • 6bea1d4 fix: add session idle TTL sweeper to prevent transport state leak (#724)
  • 0510f0c fix: SendRequest hangs forever when server process dies (#714)
  • 962f31b fix: use custom session id generator when provided (#715)
  • 7ce32bf fix: accept HTTP 204 No Content in SendNotification (#717)
  • 7c44752 fix(ci): pin Go version to 1.25 in lint workflow
  • 859588d fix: call onConnectionLost when SSE connection closes, not only on NO_ERROR (...
  • b2fb8ba tool "properties" and "required" fields missing if set them as null, Addition...
  • e2c1762 feat(server): implement task-augmented tools capability (#707)
  • 45740a0 typo: fix duplicate description of mcp-go in README (#701)
  • d46cf85 refactor: simplify tests with the usetesting linter (#703)
  • Additional commits viewable in compare view

Updates github.com/samber/lo from 1.52.0 to 1.53.0

Release notes

Sourced from github.com/samber/lo's releases.

v1.53.0

Announcing the latest release of lo with lots of good gifts! 🎁

🌊 First, a big thanks to @​d-enk for making lots of performance improvements in the recent weeks.

🧪 Second, this release introduces a new simd experimental package. If you run on an amd64 architecture and a recent CPU, you can perform very fast operations thanks to SIMD CPU instructions.

💥 Third, this version adds *Err variants of many lo helpers (like MapErr, FlatMapErr, ReduceErr, etc.) whose callbacks can return an error and short-circuit execution when one occurs.

[!NOTE] The simd sub-package is considered not stable. We might break the initial API based on developers' feedback in the coming months.


Features & improvements

Deprecation

Performance improvements

... (truncated)

Commits

Updates golang.org/x/mod from 0.32.0 to 0.33.0

Commits

Updates golang.org/x/net from 0.49.0 to 0.51.0

Commits
  • 60b3f6f internal/http3: prevent Server handler from writing longer body than declared
  • b0ca456 internal/http3: fix Write in Server Handler returning the wrong value
  • 1558ba7 publicsuffix: update to 2026-02-06
  • 4e1c745 internal/http3: make Server response include headers that can be inferred
  • 19f580f http2: fix nil panic in typeFrameParser for unassigned frame types
  • 818aad7 internal/http3: add server to client trailer header support
  • c1bbe1a internal/http3: add client to server trailer header support
  • 29181b8 all: remove go1.25 and older build constraints
  • 8109305 all: upgrade go directive to at least 1.25.0 [generated]
  • 0b37bdf quic: don't run TestStreamsCreateConcurrency in synctest bubble
  • Additional commits viewable in compare view

Updates golang.org/x/term from 0.39.0 to 0.40.0

Commits

Updates google.golang.org/genproto/googleapis/rpc from 0.0.0-20251124214823-79d6a2a48846 to 0.0.0-20260128011058-8636f8732409

Commits

Updates google.golang.org/grpc from 1.78.0 to 1.79.1

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.79.1

Bug Fixes

Release 1.79.0

API Changes

  • mem: Add experimental API SetDefaultBufferPool to change the default buffer pool. (#8806)
  • experimental/stats: Update MetricsRecorder to require embedding the new UnimplementedMetricsRecorder (a no-op struct) in all implementations for forward compatibility. (#8780)

Behavior Changes

  • balancer/weightedtarget: Remove handling of Addresses and only handle Endpoints in resolver updates. (#8841)

New Features

  • experimental/stats: Add support for asynchronous gauge metrics through the new AsyncMetricReporter and RegisterAsyncReporter APIs. (#8780)
  • pickfirst: Add support for weighted random shuffling of endpoints, as described in gRFC A113.
    • This is enabled by default, and can be turned off using the environment variable GRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING. (#8864)
  • xds: Implement :authority rewriting, as specified in gRFC A81. (#8779)
  • balancer/randomsubsetting: Implement the random_subsetting LB policy, as specified in gRFC A68. (#8650)

Bug Fixes

  • credentials/tls: Fix a bug where the port was not stripped from the authority override before validation. (#8726)
  • xds/priority: Fix a bug causing delayed failover to lower-priority clusters when a higher-priority cluster is stuck in CONNECTING state. (#8813)
  • health: Fix a bug where health checks failed for clients using legacy compression options (WithDecompressor or RPCDecompressor). (#8765)
  • transport: Fix an issue where the HTTP/2 server could skip header size checks when terminating a stream early. (#8769)
  • server: Propagate status detail headers, if available, when terminating a stream during request header processing. (#8754)

Performance Improvements

  • credentials/alts: Optimize read buffer alignment to reduce copies. (#8791)
  • mem: Optimize pooling and creation of buffer objects. (#8784)
  • transport: Reduce slice re-allocations by reserving slice capacity. (#8797)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-mod group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/authzed/authzed-go](https://github.com/authzed/authzed-go) | `1.7.0` | `1.8.0` |
| [github.com/authzed/spicedb](https://github.com/authzed/spicedb) | `1.49.1-0.20260205205028-286d6e84c0dd` | `1.49.2` |
| [github.com/mark3labs/mcp-go](https://github.com/mark3labs/mcp-go) | `0.43.2` | `0.44.1` |
| [github.com/samber/lo](https://github.com/samber/lo) | `1.52.0` | `1.53.0` |
| [golang.org/x/mod](https://github.com/golang/mod) | `0.32.0` | `0.33.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.49.0` | `0.51.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.78.0` | `1.79.1` |



Updates `github.com/authzed/authzed-go` from 1.7.0 to 1.8.0
- [Release notes](https://github.com/authzed/authzed-go/releases)
- [Commits](authzed/authzed-go@v1.7.0...v1.8.0)

Updates `github.com/authzed/spicedb` from 1.49.1-0.20260205205028-286d6e84c0dd to 1.49.2
- [Release notes](https://github.com/authzed/spicedb/releases)
- [Changelog](https://github.com/authzed/spicedb/blob/main/CHANGELOG.md)
- [Commits](https://github.com/authzed/spicedb/commits/v1.49.2)

Updates `github.com/mark3labs/mcp-go` from 0.43.2 to 0.44.1
- [Release notes](https://github.com/mark3labs/mcp-go/releases)
- [Commits](mark3labs/mcp-go@v0.43.2...v0.44.1)

Updates `github.com/samber/lo` from 1.52.0 to 1.53.0
- [Release notes](https://github.com/samber/lo/releases)
- [Commits](samber/lo@v1.52.0...v1.53.0)

Updates `golang.org/x/mod` from 0.32.0 to 0.33.0
- [Commits](golang/mod@v0.32.0...v0.33.0)

Updates `golang.org/x/net` from 0.49.0 to 0.51.0
- [Commits](golang/net@v0.49.0...v0.51.0)

Updates `golang.org/x/term` from 0.39.0 to 0.40.0
- [Commits](golang/term@v0.39.0...v0.40.0)

Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20251124214823-79d6a2a48846 to 0.0.0-20260128011058-8636f8732409
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/grpc` from 1.78.0 to 1.79.1
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.78.0...v1.79.1)

---
updated-dependencies:
- dependency-name: github.com/authzed/authzed-go
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-mod
- dependency-name: github.com/authzed/spicedb
  dependency-version: 1.49.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-mod
- dependency-name: github.com/mark3labs/mcp-go
  dependency-version: 0.44.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-mod
- dependency-name: github.com/samber/lo
  dependency-version: 1.53.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-mod
- dependency-name: golang.org/x/mod
  dependency-version: 0.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-mod
- dependency-name: golang.org/x/net
  dependency-version: 0.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-mod
- dependency-name: golang.org/x/term
  dependency-version: 0.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-mod
- dependency-name: google.golang.org/genproto/googleapis/rpc
  dependency-version: 0.0.0-20260128011058-8636f8732409
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-mod
- dependency-name: google.golang.org/grpc
  dependency-version: 1.79.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-mod
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the area/dependencies Affects dependencies label Mar 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/dependencies Affects dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants